mailing list archives
Re: Linux & BSD's lpr exploit
From: capitan () sunset backbone olemiss edu (Capitan)
Date: Wed, 30 Oct 1996 16:54:01 -0600
I tried to use the lpr exploit on my machine which runs Redhat 4.0.
It says "lpr: lp: unknown printer". It is setuid. I was wondering if you
could set lp so that the program would work. You could do it by
enviroment variable, but what would you set it to if there isn't a printer
for the machine. Is it just not possible for the bug to work on Redhat
4.0? I would hate for one of my users to find a way to exploit it after i
thought it was safe. My kernel version is 2.0.23, but I'm going to
upgrade it to 2.0.24 tonight.
Do I not need to worry about this bug? any help is appreciated.
- Re: BoS: Urgent !! Serious Linux Security Bug...., (continued)